CVE-2025-6670

A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...

CVE-2025-6670

A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...

CVE-2025-6670 Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services

A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...

CVE-2025-11620

creationtimestamp| type| source ---|---|--- 2025-11-18 10:35:30+00:00| seen| https://gist.github.com/Darkcrai86/3b46318d5feadc46d810527e4fe7542f...

CVE-2025-12827

creationtimestamp| type| source ---|---|--- 2025-11-18 09:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vfqjb3pn2w...

kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...

CVE-2025-64734

creationtimestamp| type| source ---|---|--- 2025-11-18 05:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uyyg46vf2x...

Siemens SCALANCE and RUGGEDCOM Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-39499)

vmci: speculation leaks by sanitizing event in eventdeliver. eventmsg is controlled by user-space, eventmsg-eventdata.event is passed to eventdeliver and used as an index without sanitization, leading to information leaks. This plugin only works with Tenable.ot. Please visit...

BIT-MOODLE-2025-62400 Moodle: hidden group names visible to event creators

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

CVE-2024-44654

creationtimestamp| type| source ---|---|--- 2025-11-17 21:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5u534xxbq2k...

CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

What It Takes to Design Trust into Event-Driven Architectures with Amazon EventBridge

How disciplined design turns Amazon EventBridge from an open event bus into a system of verified trust. Event-driven architecture has become essential for achieving agility in the cloud. Yet as integrations multiply, so do the hidden pathways that adversaries can exploit. Amazon EventBridge helps...

CVE-2025-64027

creationtimestamp| type| source ---|---|--- 2025-11-17 15:00:08+00:00| exploited| Telegram/qn6bp8YUpk0QotLnP9WKGw1cgZ9AzFWXwr3JDEbfbgSiUY 2025-11-20 19:33:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63j46lvob2q 2026-06-19 12:45:46+00:00| exploited|...

CVE-2025-36460

creationtimestamp| type| source ---|---|--- 2025-11-17 14:30:17+00:00| seen| https://infosec.place/objects/f0ff24dd-b424-4838-a02b-7e7d2fc4cfa8 2025-11-18 01:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ukyhvw6h26...

CVE-2025-13163

creationtimestamp| type| source ---|---|--- 2025-11-17 07:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5spdns3e72n...

CVE-2025-60022

creationtimestamp| type| source ---|---|--- 2025-11-17 07:12:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sodej5wq2k...

CVE-2025-13259

creationtimestamp| type| source ---|---|--- 2025-11-17 03:12:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5savvqa2b2j...

SUSE CVE-2025-40187

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-12149

creationtimestamp| type| source ---|---|--- 2025-11-14 15:09:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5lxkrcesf2a...

CVE-2025-55073

creationtimestamp| type| source ---|---|--- 2025-11-14 09:03:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ld5kyri22x 2025-11-14 10:41:12+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5lik2vrb3c2...